Hi everyone,
We're trying to implement Trusted Types (require-trusted-types-for 'script') in a GWT 2.13 application as part of CSP hardening.
We created a default Trusted Types policy, but when Trusted Types is enforced, the application fails during startup because the GWT-generated bootstrap code triggers TrustedScript/TrustedScriptURL violations.
Has anyone successfully implemented Trusted Types with GWT? Is there any official support or recommended approach for this?
Thanks in advance!
--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/1b60c2ba-afa2-4f3d-ad8c-251c403729adn%40googlegroups.com.
No comments:
Post a Comment